AES-256-GCM
Authenticated encryption that detects tampering instantly — the same cipher trusted by banks and governments.
Araf Studio · Security Tools
CryptVault seals your files and text with AES‑256‑GCM, right inside your browser. No uploads, no servers, no accounts holding your secrets — just the Web Crypto API doing what it does best.
Authenticated encryption that detects tampering instantly — the same cipher trusted by banks and governments.
Your password is stretched through SHA-256 a quarter-million times, turning brute-force guessing into a losing game.
Every byte stays on your device. There's no backend to breach, subpoena, or leak — because there isn't one.
Continue with your Google account to enter the vault.
Type a message or drop in any file, then set a password.
CryptVault derives a key locally and encrypts or decrypts in your browser — nothing is ever sent anywhere.